Vulnerabilities / Threats
6/21/2010
01:27 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Microsoft Sues Hotmail Spammer Again

The company's complaint claims the defendants created fake Hotmail accounts in order to sanitize their spam messages and make them appear legitimate.

Microsoft is suing a group of individuals and companies for creating millions of fake Hotmail accounts in order to subvert community spam reporting.

In a blog post last week, John Scarrow, general manager of safety services for Microsoft, said that earlier in June, Microsoft had filed a lawsuit in U.S. District Court in Seattle alleging that defendants Boris Mizhen, Dimitri Kovalsky, Muhommad Mohsan-ul Moula and their respective companies, in conjunction with DeCaptcher.com, and several John Does, "opened millions of Hotmail e-mail accounts and hired people to manually identify spam mails as legitimate mails in order to trick Hotmail into classifying spam as legitimate mail."




Image Gallery: 10 Drivers For Microsoft Surge In 2010
(click for larger image and for full photo gallery)

Microsoft runs its Junk E-Mail Reporting Program (JMRP) and Smart Network Data Services (SNDS) to allow Hotmail users to report spam, to provide data to legitimate marketers to improve message deliverability, and to help Microsoft tune its SmartScreen spam filter

The company's lawsuit alleges that the defendants "enrolled in Microsoft's JMRP and SNDS under false pretense to gain access to detailed data about Defendants' e-mail activity, hired a team and used computer software to generate millions of unauthorized Hotmail e-mail accounts, and then used those unauthorized Hotmail e-mail accounts to sanitize Defendants' spam by identifying their own spam e-mail messages as 'not spam.'"

In so doing, Microsoft's complaint says that the defendants were able to bypass its spam filters and ensure that their spam messages reached Hotmail users.

Microsoft, like other companies that provide free online services, relies on CAPTCHA puzzles to prevent automatic account creation. But computers have become increasingly capable of solving those puzzles using a variety of methods. Spammers, Microsoft concedes in its complaint, "continue to adopt practices and technological devices to evade Microsoft's technologies and to frustrate Microsoft's efforts."

The lawsuit alleges that Moula, a.k.a. Mr. Ranak, create "verified" Hotmail e-mail accounts with usernames and passwords for as little as $15 per thousand. Decaptcher.com offers to solve such puzzles for as little as $2 per thousand.

This is the second time Microsoft has sued Mizhen for spamming Hotmail users. In 2004, Mizhen settled a lawsuit brought by the company a year earlier for $2 million.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8142
Published: 2014-12-20
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys w...

CVE-2013-4440
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

CVE-2013-4442
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

CVE-2013-7401
Published: 2014-12-19
The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method.

CVE-2014-2026
Published: 2014-12-19
Cross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.